Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
File:                     mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft (raw, json)
Hash identifier:          6FTnMXEW1JFDzj3TIHqqpLzE/vA6JP0HIPcvGSAaXAE=
Subject key identifier:   E2:29:99:7F:23:BB:3E:0C:1E:7B:7E:56:1D:42:82:26:E0:A1:14:0A
Authority key identifier: 98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB
Certificate issuer:       /CN=F36B5362AF/serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
Certificate serial:       9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
Manifest number:          9B
Signing time:             Mon 02 Mar 2026 03:30:41 +0000
Manifest this update:     Mon 02 Mar 2026 03:30:41 +0000
Manifest next update:     Wed 04 Mar 2026 03:30:41 +0000
Files and hashes:         1: mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl (hash: MYlBAKWd0DKiGXwGXhXsaVfXjYP6aiPE9h8z+y+idTQ=)
                          2: C9A68EA4A28611F086BAC69BDAE4EC9C.roa (hash: 7VlIZ2iujVms/bcZzJtHMjuTIN2+7NdE9XhtEe0/jW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5362AF, serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
        Validity
            Not Before: Mar  2 03:30:41 2026 GMT
            Not After : Mar  4 03:30:41 2026 GMT
        Subject: CN=69a50461-4314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:4a:7b:e9:b2:fd:82:de:0d:02:cc:f8:78:
                    1a:f0:1a:84:35:e7:a3:48:ea:9d:b3:64:c7:e6:20:
                    ea:65:38:a9:55:b3:6d:94:77:ce:e5:13:76:9c:90:
                    cb:99:26:9d:3e:11:66:27:fe:43:42:07:dc:40:39:
                    83:8a:cc:fb:7b:c6:a8:0d:f8:be:ed:7d:06:1e:4f:
                    59:03:de:4c:25:24:72:1c:b4:74:e5:66:b8:26:b9:
                    50:6b:83:0f:bc:b6:e5:44:be:94:28:7a:65:d0:e6:
                    77:00:68:c0:04:d6:92:8d:29:a1:e4:43:bf:a0:36:
                    2a:c3:56:5a:4c:98:48:aa:7d:29:d9:e3:62:22:8c:
                    cf:91:35:98:98:18:8c:12:af:38:be:8d:59:2e:bc:
                    d8:16:8d:62:7f:9a:ac:11:49:01:c0:12:ca:51:42:
                    6b:4d:18:88:b3:d4:7f:58:25:21:3d:88:6e:5d:22:
                    be:83:da:7e:8d:f9:28:aa:9e:ee:34:04:4d:dd:28:
                    22:64:4f:fc:08:ec:18:ab:42:08:09:bb:97:c9:59:
                    d7:44:99:6a:06:42:ba:22:eb:27:b1:69:0c:8e:3c:
                    c5:db:91:a2:14:15:26:2b:92:96:d8:c8:a6:8e:9e:
                    63:19:b1:d4:19:b9:b0:19:be:aa:25:9f:34:4f:73:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:29:99:7F:23:BB:3E:0C:1E:7B:7E:56:1D:42:82:26:E0:A1:14:0A
            X509v3 Authority Key Identifier:
                keyid:98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:34:c1:d5:38:35:4d:dd:14:7f:e1:57:58:1e:80:30:ba:08:
         c2:a5:4e:27:5c:ed:24:33:60:36:3a:62:1c:f1:d2:92:dd:2f:
         68:c8:c1:1b:62:66:d4:13:58:70:1e:c5:aa:a4:08:0b:e5:05:
         a1:ff:ad:52:4e:67:65:bc:b2:a2:cb:4a:c3:76:27:41:98:6e:
         67:29:d5:1d:55:e7:fa:30:2c:5a:af:c3:dd:ca:4a:2f:62:a9:
         b2:17:04:de:07:be:17:65:1f:b3:16:1b:50:51:69:fc:93:d5:
         a6:80:33:bd:fa:bc:74:e4:83:9b:48:98:b0:41:7d:af:17:01:
         58:f6:0b:93:8a:df:fc:43:90:66:47:53:35:63:ad:b6:53:8a:
         0f:77:44:05:a8:9a:01:c4:78:aa:03:ac:8b:13:7e:ce:91:89:
         0b:19:01:ad:9b:7d:90:08:7b:77:e4:0c:50:25:e1:d4:44:0c:
         d8:79:5e:2a:8e:12:e6:68:6f:7c:20:ab:88:51:34:41:7e:50:
         5b:01:6b:09:ac:5f:48:c1:67:26:4d:56:f3:14:14:45:ea:73:
         fb:51:9c:aa:8c:f5:12:9d:b5:4a:f3:a4:67:d3:e1:e6:c5:f2:
         cf:f9:1f:2e:c0:7b:0b:f4:d9:5b:0d:df:b9:2e:d4:80:99:f3:
         36:98:3b:12
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjUzNjJBRjExMC8GA1UEBRMoOTgyNUVBQTMxNDNBMjkwOEZBODg5N0Q1MjJBNTQw
OTk5MTg2MzJEQjAeFw0yNjAzMDIwMzMwNDFaFw0yNjAzMDQwMzMwNDFaMBgxFjAU
BgNVBAMTDTY5YTUwNDYxLTQzMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3D0p76bL9gt4NAsz4eBrwGoQ156NI6p2zZMfmIOplOKlVs22Ud87lE3ac
kMuZJp0+EWYn/kNCB9xAOYOKzPt7xqgN+L7tfQYeT1kD3kwlJHIctHTlZrgmuVBr
gw+8tuVEvpQoemXQ5ncAaMAE1pKNKaHkQ7+gNirDVlpMmEiqfSnZ42IijM+RNZiY
GIwSrzi+jVkuvNgWjWJ/mqwRSQHAEspRQmtNGIiz1H9YJSE9iG5dIr6D2n6N+Siq
nu40BE3dKCJkT/wI7BirQggJu5fJWddEmWoGQroi6yexaQyOPMXbkaIUFSYrkpbY
yKaOnmMZsdQZubAZvqolnzRPcwKFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4imZ
fyO7Pgwee35WHUKCJuChFAowHwYDVR0jBBgwFoAUmCXqoxQ6KQj6iJfVIqVAmZGG
MtswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1MzYyL0IxMDQzNTNBQTAzOTExRjBCODk4QjVBOERBRTRFQzlDL21DWHFv
eFE2S1FqNmlKZlZJcVZBbVpHR010cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21DWHFveFE2S1FqNmlKZlZJcVZBbVpHR010cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjUzNjIvQjEwNDM1M0FBMDM5MTFGMEI4OThCNUE4REFF
NEVDOUMvbUNYcW94UTZLUWo2aUpmVklxVkFtWkdHTXRzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6NMHVODVN3RR/4VdYHoAwugjCpU4n
XO0kM2A2OmIc8dKS3S9oyMEbYmbUE1hwHsWqpAgL5QWh/61STmdlvLKiy0rDdidB
mG5nKdUdVef6MCxar8PdykovYqmyFwTeB74XZR+zFhtQUWn8k9WmgDO9+rx05IOb
SJiwQX2vFwFY9guTit/8Q5BmR1M1Y622U4oPd0QFqJoBxHiqA6yLE37OkYkLGQGt
m32QCHt35AxQJeHURAzYeV4qjhLmaG98IKuIUTRBflBbAWsJrF9IwWcmTVbzFBRF
6nP7UZyqjPUSnbVK86Rn0+HmxfLP+R8uwHsL9NlbDd+5LtSAmfM2mDsS
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:16:31 2026 by rpki-client